{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T16:52:32Z","timestamp":1786121552762,"version":"build-2736575974"},"reference-count":104,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/eurospw72509.2026.00035","type":"proceedings-article","created":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T19:11:36Z","timestamp":1786043496000},"page":"242-252","source":"Crossref","is-referenced-by-count":0,"title":["Cybersecurity is the True Frontier for Generative AI Success or Failure"],"prefix":"10.1109","author":[{"given":"Edward","family":"Raff","sequence":"first","affiliation":[{"name":"CrowdStrike"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maor","family":"Ashkenazi","sequence":"additional","affiliation":[{"name":"Ben-Gurion University of the Negev","department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sagar","family":"Samtani","sequence":"additional","affiliation":[{"name":"Kelley School of Business"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David J.","family":"Elkind","sequence":"additional","affiliation":[{"name":"CrowdStrike"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sven","family":"Krasser","sequence":"additional","affiliation":[{"name":"CrowdStrike"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Employers must act as cybersecurity workforce growth stalls and skills gaps widen employers must act as cybersecurity workforce growth stalls and skills gaps widen","year":"2024"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00010"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3617897"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.telpol.2025.102976"},{"key":"ref5","article-title":"Frontier ai\u2019s impact on the cybersecurity landscape","author":"Guo","year":"2025"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.3389\/fcomp.2024.1462250"},{"key":"ref7","article-title":"2026 crowdstrike global threat report: Ai accelerates adversaries and reshapes the attack surface","volume-title":"CrowdStrike, Tech. Rep.","year":"2026"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2013.19"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_6"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638293"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"ref12","first-page":"351","article-title":"Effective and efficient malware detection at the end host","volume-title":"USENIX security symposium","author":"Kolbitsch"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.22"},{"key":"ref14","first-page":"2721","article-title":"Learning to detect and classify malicious executables in the wild","volume":"7","author":"Kolter","year":"2006","journal-title":"The Journal of Machine Learning Research"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.9"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413680"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2487788.2488056"},{"key":"ref18","article-title":"An Observational Investigation of Reverse Engineers\u2019 Processes","volume-title":"USENIX Security Symposium","author":"Votipka"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.3390\/jimaging8080208"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s10278-016-9911-z"},{"key":"ref21","first-page":"2727","article-title":"RE-Mind: a First Look Inside the Mind of a Reverse Engineer","author":"Mantovani"},{"key":"ref22","article-title":"Superset Decompilation","author":"Liu","year":"2026","journal-title":"arXiv:2603.28002 [cs]"},{"issue":"23","key":"ref23","first-page":"24 893","article-title":"Can LLMs Obfuscate Code? A Systematic Analysis of Large Language Models into Assembly Code Obfuscation","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence","volume":"39","author":"Mohseni"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991114"},{"key":"ref25","first-page":"290","article-title":"Obfuscation of executable code to improve resistance to static disassembly","volume-title":"Proceedings of the 10th ACM conference on Computer and communication security - CCS \u201903","author":"Linn"},{"key":"ref26","doi-asserted-by":"crossref","first-page":"58 698","DOI":"10.52202\/079017-1871","article-title":"Assemblage: Automatic Binary Dataset Construction for Machine Learning","volume":"37","author":"Liu","year":"2024","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref27","first-page":"21 636","article-title":"Is Function Similarity Over-Engineered? Building a Benchmark","volume-title":"Advances in Neural Information Processing Systems","volume":"37","author":"Saul"},{"key":"ref28","article-title":"SynCode: LLM Generation with Grammar Augmentation","author":"Ugare","year":"2024","journal-title":"Transactions on Machine Learning Research"},{"key":"ref29","article-title":"UTF-8 Plumbing: Byte-level Tokenizers Unavoidably Enable LLMs to Generate Ill-formed UTF-8","author":"Firestone","year":"2025"},{"key":"ref30","first-page":"10 932","article-title":"Grammar-Constrained Decoding for Structured NLP Tasks without Finetuning","volume-title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing","author":"Geng"},{"key":"ref31","first-page":"9895","article-title":"PICARD: Parsing Incrementally for Constrained Auto-Regressive Decoding from Language Models","volume-title":"Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","author":"Scholak"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140442"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3564625.3567993"},{"key":"ref34","first-page":"2765","article-title":"Decomperson: How Humans Decompile and What We Can Learn From It","author":"Burk"},{"key":"ref35","first-page":"2867","article-title":"\u201cI\u2019m trying to learn...and I\u2019m shooting myself in the foot\u201d: Beginners\u2019 Struggles When Solving Binary Exploitation Exercises","author":"Mattei"},{"key":"ref36","volume-title":"How Large Language Models Work","author":"Raff","year":"2025"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3394231.3397922"},{"key":"ref38","article-title":"Using LLMs as a reverse engineering sidekick","author":"Venere","year":"2025"},{"key":"ref39","article-title":"From assistant to analyst: The power of gemini 1.5 pro for malware analysis","author":"Quintero","year":"2024"},{"key":"ref40","article-title":"Automatic YARA Rule Generation Using Biclustering","volume-title":"13th ACM Workshop on Artificial Intelligence and Security (AISec\u201920)","volume":"arXiv: 2009.03779","author":"Raff"},{"issue":"2","key":"ref41","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1109\/MSP.2018.1870876","article-title":"Xandra: An Autonomous Cyber Battle System for the Cyber Grand Challenge","volume":"16","author":"Nguyen-Tuong","year":"2018","journal-title":"IEEE Security & Privacy"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134105"},{"issue":"2","key":"ref43","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/MSP.2018.1870858","article-title":"Mechanical Phish: Resilient Autonomous Hacking","volume":"16","author":"Shoshitaishvili","year":"2018","journal-title":"IEEE Security & Privacy"},{"key":"ref44","article-title":"The road to top 1: How xbow did it","author":"Waisman","year":"2025"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/sp37862.2018"},{"key":"ref46","article-title":"american fuzzy lop","author":"Zalewski","year":"2013"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3428334"},{"key":"ref48","article-title":"AFL++: Combining Incremental Steps of Fuzzing Research","author":"Fioraldi"},{"key":"ref49","first-page":"6279","article-title":"ELFuzz: Efficient input generation via LLM-driven synthesis over fuzzer space","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Chen"},{"key":"ref50","article-title":"ghidramcp","author":"Wired","year":"2025"},{"key":"ref51","article-title":"The MITRE ATT&CK T1027 obfuscated files or information technique","author":"Yuceel","year":"2024"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3494110.3528242"},{"key":"ref53","article-title":"Malware Detection by Eating a Whole EXE","volume-title":"AAAI Workshop on Artificial Intelligence for Cyber Security","volume":"arXiv: 1710.09435","author":"Raff"},{"key":"ref54","article-title":"Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection","volume-title":"The Thirty-Fifth AAAI Conference on Artificial Intelligence","volume":"arXiv: 2012.09390","author":"Raff"},{"key":"ref55","first-page":"4042","article-title":"Holographic Global Convolutional Networks for Long-Range Prediction Tasks in Malware Detection","volume-title":"Proceedings of The 27th International Conference on Artificial Intelligence and Statistics","author":"Alam"},{"key":"ref56","first-page":"490","article-title":"Recasting Self-Attention with Holographic Reduced Representations","volume-title":"Proceedings of the 40th International Conference on Machine Learning","author":"Alam"},{"issue":"2019","key":"ref57","article-title":"Linformer: Self-Attention with Linear Complexity","volume":"2048","author":"Wang","year":"2020"},{"key":"ref58","first-page":"1","article-title":"Rethinking Attention with Performers","volume":"arXiv: 2009.14794","author":"Choromanski","year":"2020"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.3233\/faia251322"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3576708"},{"issue":"2","key":"ref61","first-page":"267","article-title":"Iot malware threat hunting method based on improved transformer","volume":"25","author":"Li","year":"2023","journal-title":"International Journal of Network Security"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-233556"},{"key":"ref63","article-title":"Byte back: Next-generation malware classification using binary transformers","author":"St\u00f6rtz","year":"2025"},{"key":"ref64","article-title":"Bytes are all you need: Transformers operating directly on file bytes","volume":"abs\/2306.00238","author":"Horton","year":"2023","journal-title":"ArXiv"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.453"},{"key":"ref66","first-page":"451","article-title":"Tady: A Neural Disassembler without Structural Constraint Violations","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","volume":"arXiv","author":"Qin"},{"key":"ref67","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2021.23112","article-title":"XDA: Accurate, Robust Disassembly with Transfer Learning","volume-title":"Proceedings 2021 Network and Distributed System Security Symposium","author":"Pei"},{"key":"ref68","first-page":"2709","article-title":"DeepDi: Learning a Relational Graph Convolutional Network Model on Instructions for Fast and Accurate Disassembly","author":"Yu"},{"key":"ref69","first-page":"3033","article-title":"Disassembly as Weighted Interval Scheduling with Learned Weights","volume-title":"2025 IEEE Symposium on Security and Privacy (SP)","author":"Flores-Montoya"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486867"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3701716.3715212"},{"key":"ref72","first-page":"7","article-title":"TLSH - A Locality Sensitive Hash","volume-title":"2013 Fourth Cybercrime and Trustworthy Computing Workshop","author":"Oliver"},{"key":"ref73","first-page":"301922","article-title":"If at first you don\u2019t succeed, trie, trie again: Correcting TLSH scalability claims for large-dataset malware forensics","volume":"53","author":"Gonzalez","year":"2025","journal-title":"Forensic Science International: Digital Investigation"},{"key":"ref74","first-page":"9","article-title":"SMT solvers for software security","volume-title":"Proceedings of the 6th USENIX conference on Offensive Technologies","author":"Vanegue"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/2578855.2535857"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94144-8_22"},{"key":"ref77","first-page":"1288","article-title":"SMT Solver Validation Empowered by Large Pre-Trained Language Models","volume-title":"2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Sun"},{"key":"ref78","first-page":"61 065","article-title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","volume-title":"Advances in Neural Information Processing Systems","volume":"37","author":"Mehrotra"},{"key":"ref79","article-title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","volume":"arXiv:2403.12171 [cs]","author":"Zhou","year":"2024"},{"key":"ref80","article-title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","author":"Pavlova","year":"2025"},{"key":"ref81","article-title":"Attacking machine learning","author":"Ashkenazy","year":"2019"},{"key":"ref82","article-title":"Rank-1 Similarity Matrix Decomposition For Modeling Changes in Antivirus Consensus Through Time","volume-title":"Proceedings of the Conference on Applied Machine Learning for Information Security","volume":"arXiv: 2201.00757v1","author":"Joyce"},{"key":"ref83","first-page":"729","article-title":"TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Pendlebury"},{"key":"ref84","article-title":"A new dataset and methodology for malicious url classification","volume-title":"The AAAI-25 Workshop on Artificial Intelligence for Cyber Security (AICS)","author":"Schvartzman"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517320"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3711896.3737431"},{"key":"ref87","article-title":"SOREL-20M: A Large Scale Benchmark Dataset for Malicious PE Detection","volume":"arXiv: 2012.07634","author":"Harang","year":"2020","journal-title":"arXiv"},{"key":"ref88","first-page":"119","volume-title":"Machine Learning-Based Malware Detection in a Production Setting","author":"Krasser","year":"2025"},{"issue":"3","key":"ref89","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1109\/MSP.2011.67","article-title":"Stuxnet: Dissecting a Cyberwarfare Weapon","volume":"9","author":"Langner","year":"2011","journal-title":"IEEE Security & Privacy Magazine"},{"key":"ref90","article-title":"Leveraging Uncertainty for Improved Static Malware Detection Under Extreme False Positive Constraints","volume-title":"IJCAI-21 1st International Workshop on Adaptive Cyber Defense","volume":"arXiv: 2108.04081","author":"Nguyen"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102785"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-20026-6_11"},{"key":"ref93","article-title":"Unleashing the power of unlabeled data: A self-supervised learning framework for cyber attack detection in smart grids","author":"Zeng","year":"2024","journal-title":"arXiv preprint arXiv:2405.13965"},{"issue":"2","key":"ref94","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1109\/MC.2018.2888764","article-title":"KDD Cup 99 Data Sets: A Perspective on the Role of Data Sets in Network Intrusion Detection Research","volume":"52","author":"Siddique","year":"2019","journal-title":"Computer"},{"key":"ref95","first-page":"1","article-title":"Benchmarking datasets for Anomaly-based Network Intrusion Detection: KDD CUP 99 alternatives","volume-title":"2018 IEEE 3rd International Conference on Computing, Communication and Security (ICCCS)","author":"Divekar"},{"key":"ref96","article-title":"That Escalated Quickly: An ML Framework for Alert Prioritization","author":"Gelman","year":"2023","journal-title":"arXiv:2302.06648 [cs]"},{"key":"ref97","first-page":"506","article-title":"Getting Passive Aggressive About False Positives: Patching Deployed Malware Detectors","volume-title":"2020 International Conference on Data Mining Workshops (ICDMW)","author":"Raff"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.icte.2024.05.007"},{"key":"ref99","article-title":"Survey perspective: The role of explainable ai in threat intelligence","author":"Rastogi","year":"2025","journal-title":"arXiv preprint arXiv:2503.02065"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3204171"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1016\/j.iswa.2024.200472"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC\/6GSummit63408.2025.11037121"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.3389\/fcomp.2025.1520741"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00013"}],"event":{"name":"2026 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)","location":"Lisbon, Portugal","start":{"date-parts":[[2026,7,6]]},"end":{"date-parts":[[2026,7,10]]}},"container-title":["2026 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11631844\/11631895\/11632077.pdf?arnumber=11632077","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T04:51:39Z","timestamp":1786078299000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11632077\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":104,"URL":"https:\/\/doi.org\/10.1109\/eurospw72509.2026.00035","relation":{},"subject":[],"published":{"date-parts":[[2026,7]]}}}